Despite heavy adoption of the cloud, misconfigurations are often overlooked and remain a significant issue in cloud security. WithCloud Security Posture Management (CSPM) tools available to counter cloud misconfigurations, their effectiveness, like their existence, isoften unknown, misunderstood, or underutilised. This paper helps understand free tools, including both AWS and Azure first-party CSPMs anda third-party CSPM (Prowler), and assesses the effectiveness of an AI-generated DIY misconfiguration scanner in comparison to the Azureand AWS cloud environments.
Samuel Moss (Sun,) studied this question.